function dologin(tbl){
	print(tbl)
	let user_login=tbl.username;
	let user_pass="###"+Lang.md5(Lang.md5("gtw2JMG5BqSQrlCLVK"+tbl.password))
	let u=dao.fetch("cmf_user",Cnd.where("user_login","=",user_login)
			.and("user_pass","=",user_pass))
	if(tbl.captcha!=sattr("captcha")){
		print(sattr("captcha"))
		attr("return", {"code":0,"msg":"captcha fail!"})
	}else if(u!=null){
		sattr("admin",u)
		attr("return", {"code":1,"msg":"login success!","url":"/admin/index/index.html"})
	}else{
		attr("return", {"code":0,"msg":"login password or username fail!"})
	}
	return "json"
}